Sophos vulnerabilities
49 CVEs and advisories name Sophos as an affected vendor, 3 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2022-3980An XML External Entity (XEE) vulnerability allows server-side request forgery (SSRF) and potential code execution in Sophos Mobile managed o
- CVE-2022-3236A code injection vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v19.0 MR1
- CVE-2022-1807Multiple SQLi vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin in Sophos Firewall older than version 18.
- CVE-2021-25268Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from MySophos admin to SFOS admin in Sophos Firewall older than vers
- CVE-2021-25267Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin in Sophos Firewall older than version 19.0
- CVE-2021-25266An insecure data storage vulnerability allows a physical attacker with root privileges to retrieve TOTP secret keys from unlocked phones in
- CVE-2022-0331An information disclosure vulnerability in Webadmin allows an unauthenticated remote attacker to read the device serial number in Sophos Fir
- CVE-2022-1040An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v
- CVE-2022-0652Confd log files contain local users', including root’s, SHA512crypt password hashes with insecure access permissions.
- CVE-2022-0386A post-auth SQL injection vulnerability in the Mail Manager potentially allows an authenticated attacker to execute code in Sophos UTM befor
- CVE-2021-36809A local attacker can overwrite arbitrary files on the system with VPN client logs using administrator privileges, potentially resulting in a
- CVE-2021-36807An authenticated user could potentially execute code via an SQLi vulnerability in the user portal of SG UTM before version 9.708 MR8.
- CVE-2021-25269A local administrator could prevent the HMPA service from starting despite tamper protection using an unquoted service path vulnerability in
- CVE-2021-36808A local attacker could bypass the app password using a race condition in Sophos Secure Workspace for Android before version 9.7.3115.
- CVE-2021-25271A local attacker could read or write arbitrary files with administrator privileges in HitmanPro before version Build 318.
- CVE-2021-25270A local attacker could execute arbitrary code with administrator privileges in HitmanPro.Alert before version Build 901.
- CVE-2021-25273Stored XSS can execute as administrator in quarantined email detail view in Sophos UTM before version 9.706.
- CVE-2021-25264In multiple versions of Sophos Endpoint products for MacOS, a local attacker could execute arbitrary code with administrator privileges.
- CVE-2021-25265A malicious website could execute code remotely in Sophos Connect Client before version 2.1.